CVE-2022-1543CWE-130

Improper handling of Length parameter in erudika/scoold

Critical · published April 29, 2022

CVSS v3.0
9.3
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01114 · 65.7th percentile
Weakness
CWE-130 · Improper Handling of Length Parameter Inconsistency
Published
2022-04-29T18:10Z
EPSS history
Timeline
  • 29 APR 18:10Z
    Improper handling of Length parameter in erudika/scoold
    cvelistv5